DVA-C02 Question 340
Single answerYou are developing a serverless application using AWS Lambda. During a recent code review, your team identified potential security vulnerabilities and performance bottlenecks in the code. Which AWS service or tool can you use to automatically analyze your application code and identify issues such as security vulnerabilities, code quality problems, and potential performance improvements?
- A
AWS CodeGuru
- B
AWS CloudFormation
- C
AWS CodeBuild
- D
AWS X-Ray
Show answer and explanation
Correct answer: A
Explanation
AWS CodeGuru is the correct choice because it is an AWS service specifically designed to help developers analyze their application code for potential security vulnerabilities, code quality issues, and performance inefficiencies. Other services like CloudFormation, CodeBuild, and X-Ray serve different purposes and do not perform automated code analysis.
- A. Correct.
AWS CodeGuru is a machine learning-powered service that helps developers improve their code quality by automatically analyzing code and identifying issues such as security vulnerabilities, performance inefficiencies, and code quality problems. It is specifically designed for tasks like the one described in the question.
- B. Incorrect.
AWS CloudFormation is used for infrastructure as code to provision and manage AWS resources. It does not analyze application code for security or performance issues.
- C. Incorrect.
AWS CodeBuild is a fully managed build service that compiles source code, runs tests, and produces software packages. It does not provide code analysis capabilities.
- D. Incorrect.
AWS X-Ray is used to analyze and debug distributed applications. It helps trace requests but does not analyze application code for quality or security issues.